Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.mft
File:                     D237DEA20D73B3F216B98336BA8307D913DDB257.mft (raw, json)
Hash identifier:          /2fDKvPuSefjeptPuwWmMYosNcCzcmpi144iyxMMx0M=
Subject key identifier:   07:2E:23:0E:45:DB:47:0E:2D:76:26:80:3F:F9:5C:26:B3:FE:4E:BD
Authority key identifier: D2:37:DE:A2:0D:73:B3:F2:16:B9:83:36:BA:83:07:D9:13:DD:B2:57
Certificate issuer:       /CN=D237DEA20D73B3F216B98336BA8307D913DDB257
Certificate serial:       68E87DD55BC281DF438AC45E595CA29968F89774
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D237DEA20D73B3F216B98336BA8307D913DDB257.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.mft
Manifest number:          5F
Signing time:             Fri 31 Jan 2025 08:01:03 +0000
Manifest this update:     Fri 31 Jan 2025 07:56:03 +0000
Manifest next update:     Mon 03 Feb 2025 15:26:03 +0000
Files and hashes:         1: D237DEA20D73B3F216B98336BA8307D913DDB257.crl (hash: K3OwUjMclJgznttxidTWooMSlIrvYMXbHN+pMrKGCEM=)
                          2: 3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa (hash: Jit+uJIEyqjGrv7HRmDwiYsYuySfB8Lk478TOnlXVFM=)
                          3: 3136302e32302e3130342e302f32332d3233203d3e20313532373930.roa (hash: tqotyjAH3hPNKC4KMmbJRyOeRh1hAR0CNyyT9ndAu7k=)
                          4: 3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa (hash: 5TysUWdf//ijZZADQg/kyk1hPl8L9rMcShCWekWYvss=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e8:7d:d5:5b:c2:81:df:43:8a:c4:5e:59:5c:a2:99:68:f8:97:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D237DEA20D73B3F216B98336BA8307D913DDB257
        Validity
            Not Before: Jan 31 07:56:03 2025 GMT
            Not After : Feb  3 15:26:03 2025 GMT
        Subject: CN=072E230E45DB470E2D7626803FF95C26B3FE4EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a5:50:a5:3f:4d:f3:54:8c:97:6c:f7:48:c9:
                    fe:53:f5:fc:55:d1:dc:b1:51:0b:22:e1:71:4f:6e:
                    11:cd:f1:e4:1c:83:93:43:ff:6e:84:f3:75:df:67:
                    b0:7c:5e:b6:88:38:da:f3:c3:0e:66:7a:ce:7e:2b:
                    4f:5c:e8:1b:de:41:5f:b9:d8:d2:df:b2:e4:70:0c:
                    e8:b3:36:6a:d3:e2:d4:8e:72:16:62:1b:31:de:38:
                    11:7a:0e:bf:27:e6:07:50:1d:20:ae:13:45:c4:67:
                    a2:01:2d:82:b1:11:dd:50:67:80:bf:07:b3:dc:43:
                    91:f6:38:61:e6:ae:48:00:5b:b8:cd:0a:e5:e3:b9:
                    f2:8b:01:91:4c:f0:3f:41:67:25:8b:58:7e:d5:23:
                    c7:f6:ab:e2:88:b9:23:a2:ba:e3:e1:7e:bf:25:96:
                    2d:06:a6:2d:d9:6f:52:03:eb:89:1d:59:74:32:ff:
                    9d:57:0b:b3:ef:2d:fd:13:fa:40:70:ef:f0:e9:bf:
                    69:b6:dc:f7:a3:cd:28:79:9a:20:3f:b6:80:38:fb:
                    17:19:02:39:3a:bc:b5:9c:16:5b:ff:20:d2:8b:ce:
                    48:ef:54:87:12:9d:38:13:74:22:5a:be:b0:5d:c4:
                    5d:d7:cb:48:b2:19:62:ad:db:e4:41:23:3a:c8:44:
                    90:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2E:23:0E:45:DB:47:0E:2D:76:26:80:3F:F9:5C:26:B3:FE:4E:BD
            X509v3 Authority Key Identifier:
                keyid:D2:37:DE:A2:0D:73:B3:F2:16:B9:83:36:BA:83:07:D9:13:DD:B2:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D237DEA20D73B3F216B98336BA8307D913DDB257.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8c:2e:ee:60:7e:ba:e2:d8:8f:cd:87:55:9f:13:45:d6:57:
         a8:88:a2:1a:0d:f9:fd:67:bf:34:da:79:ce:a8:0c:75:77:24:
         1c:6b:fb:00:89:01:3a:81:03:c7:25:3a:8f:b6:8a:a3:ee:6a:
         c7:70:7f:60:54:98:56:1a:5a:e5:30:94:00:b2:c2:09:07:6e:
         4d:27:39:e2:9d:6e:96:d0:b8:17:89:af:1d:6b:38:08:b3:3c:
         61:7c:21:17:8e:59:82:df:d5:6a:9c:5e:bb:44:08:30:51:ad:
         cf:a5:dd:c5:13:9f:1e:a9:49:b9:db:c9:97:7c:33:26:f4:2b:
         e5:7b:ab:88:a4:bb:e9:7c:f1:4b:74:ee:86:38:72:f7:93:0a:
         7c:8b:0a:4e:5b:72:b4:f4:f9:03:90:37:44:07:8f:e4:e7:d2:
         7c:f8:a7:c6:6d:2c:15:aa:e2:90:29:01:7b:63:43:99:ab:98:
         d4:40:61:ac:0d:f9:e3:8a:6c:65:1e:80:1d:07:0e:99:89:0d:
         c3:9d:f0:cc:9a:24:5a:0f:34:6b:79:f6:8a:24:82:72:43:17:
         44:40:0e:ae:6e:c2:7d:64:c9:87:4f:a6:a3:61:90:64:f0:ee:
         b4:5d:55:c9:3c:f4:ef:14:7e:e3:cd:0e:c2:e3:ba:08:be:6e:
         e7:91:e9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:37 2025 by rpki-client